Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/XHt6U6txMDBbVbzSvnNjcotaYrU.roa
File: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (raw, json)
Hash identifier: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=
Subject key identifier: 5C:7B:7A:53:AB:71:30:30:5B:55:BC:D2:BE:73:63:72:8B:5A:62:B5
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019FAC808F4BD5AB9692515F58AF31EB775A
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/XHt6U6txMDBbVbzSvnNjcotaYrU.roa
Signing time: Wed 29 Jul 2026 06:12:14 +0000
ROA not before: Wed 29 Jul 2026 06:12:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.18.52.0/22 maxlen: 24
89.18.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:80:8f:4b:d5:ab:96:92:51:5f:58:af:31:eb:77:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jul 29 06:12:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c7b7a53ab7130305b55bcd2be7363728b5a62b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:d9:d1:3f:40:1f:57:90:a8:a6:af:10:91:
6d:67:5c:5c:40:99:eb:36:8a:f7:8d:5c:12:33:49:
32:cb:23:95:81:43:e5:57:25:7c:78:a8:b0:f0:e2:
5d:f6:d7:c2:d9:ae:47:74:7b:f0:74:56:7c:cc:e1:
33:14:9b:19:e7:6e:3c:5e:4b:ca:7a:45:15:53:c3:
82:bc:66:6b:33:c4:f8:52:fb:a9:0b:4d:59:0b:23:
4b:25:c7:9d:c8:04:11:28:39:7d:08:da:ed:6d:e3:
8d:4b:e7:8b:6c:12:61:06:ac:70:8b:d7:f8:c6:c6:
6b:0f:e4:21:92:aa:2f:0f:05:dc:e0:8d:62:cb:d3:
a9:7e:ab:6d:02:a1:32:4f:06:79:de:6c:16:2e:e0:
1b:9a:3a:c7:94:74:5c:f2:1a:c7:f9:1e:48:86:52:
33:4b:5a:76:f4:e1:d9:2d:76:6f:be:10:28:9b:85:
11:89:35:a7:ea:8b:56:1e:33:a8:d6:1f:81:e0:d8:
4a:40:af:db:13:6d:84:86:29:71:d3:7f:b7:c5:85:
df:4c:09:b9:d0:55:22:22:14:d5:ca:21:65:a2:8b:
d8:4a:87:f5:67:17:a1:06:23:db:15:05:40:be:6b:
17:f9:cc:f7:06:cc:fb:65:10:b3:21:f7:c9:58:e7:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:7A:53:AB:71:30:30:5B:55:BC:D2:BE:73:63:72:8B:5A:62:B5
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/XHt6U6txMDBbVbzSvnNjcotaYrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.52.0-89.18.59.255
Signature Algorithm: sha256WithRSAEncryption
5d:7a:60:d1:d8:f6:01:0b:e1:5f:bc:f2:4e:93:1b:a7:7e:4b:
36:13:c8:36:27:cd:78:8b:93:36:88:46:b7:b4:72:90:e5:f0:
cc:5c:39:7f:d2:b0:42:b0:42:7e:6a:c5:44:be:16:cf:db:4b:
96:a9:8e:86:8a:de:fb:92:21:fd:e7:8d:17:a1:8b:25:f8:b8:
a2:d7:f2:f5:d4:81:f5:ca:d6:09:ae:c9:0f:22:84:22:20:95:
d8:3e:f3:64:00:23:ea:ff:98:a0:d7:f9:c9:69:d7:1f:97:8b:
41:1d:a4:25:11:ce:66:a0:b8:55:9a:35:af:a0:a8:1c:ca:9a:
0e:b0:77:42:0f:a4:e8:b7:ba:1d:6e:1e:95:02:0e:63:a6:6c:
c4:d7:77:23:88:c6:d8:40:5c:79:b1:74:5a:69:ca:16:fc:f3:
53:57:26:49:dc:98:ec:e4:81:99:b5:3c:36:82:26:c8:18:69:
0d:6a:6c:5d:b2:16:06:7b:18:85:60:7a:2a:e1:65:1b:af:31:
d6:e3:90:f8:7e:73:5e:83:ce:26:16:a5:58:a5:d6:85:16:e6:
fb:fd:e4:c9:f9:6e:f0:b5:65:df:b9:7e:a0:68:62:36:c1:96:
c6:cb:28:db:ee:60:13:2d:e9:65:b8:27:7e:25:dc:93:f2:40:
ed:dd:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:53 2026 by rpki-client